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(54) Enhanced encryption control system for a mail processing system having data center 
verification 



(57) A key control system comprises the generation 
of a first set of predetermined keys Kp red which are then 
used as master keys for a plurality of respective postage 
meters (12). The keys are then related to a respective 
meter (12) in accordance with a map or algorithm. The 
predetermined master key Kp red is encrypted with the 
date to yield a date dependent key related to the 
respective meter (12). The date dependent key is 
encrypted with a unique identifier or the respective 
meter to yield a unique key Kf jna | that is by the respec- 
tive meter to generate digital tokens. The Data Center 
(16) encrypts the date with each predetermined key 
Kpred to yie^ a table of dependent keys K^'s. The table 
of K^'s are distributed to verification sites. The verifica- 
tion site reads a meter's identification from a mailpiece 
being verified to obtain the dependent key of the 
meter (12). The verification side (34) encrypts the 
dependent key with the unique identifier to obtain 
the unique meter key which is used to verify tokens gen- 
erated by the meter (12). In the preferred embodiment, 
the master key Kp rod , the date dependent key K^, and 
the unique key Kf ina | ( in the meter are stored in the 
meter. In the alternate embodiment, the master key 
Kp rod is encrypted with a unique meter identifier to 
obtain and the unique key Kf jnaJ which is stored in the 
meter (12). The meter then generates its date depend- 
ent key which is used to generate digital tokens. 
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Description 

The invention relates to mail processing systems 
and methods and more particularly to security of post- 
age metering systems. 

Recent advances in digital printing technology have 
made it possible to implement digital, i.e., bit map 
addressable, printing for the purpose of evidencing pay- 
ment of postage by a postage-meter-like device. Where 
necessary in order to distinguish such postage-meter- 
like devices from the typical postage meter, such 
devices will be called herein Postage Evidencing 
Devices or PED's. In such devices, the printer may be a 
typical stand-alone printer. The computer driven printer 
of such a PED can print the postal indicia in a desired 
location on the face of a mail piece. Further, as used 
herein the postal indicia will be defined as the Postal 
Revenue Block or PRB. The PRB typically contains data 
such as the postage value a unique PED identification 
number, the date and in some applications the name of 
the place where the mail is originating. It must be noted, 
however that the term postage meter as used herein will 
be understood to cover the various types of postage 
accounting systems including such PED's and is not to 
be limited by the type of printer used. 

From the Post Office's point of view, it will be appre- 
ciated that a serious problem associated with PED's is 
that the digital printing makes it fairly easy to counterfeit 
the PRB since any suitable computer and printer may 
be used to generate multiple images. In fact many of 
these new PED systems may be using printers that are 
able to print legitimate indicia which are indistinguisha- 
ble from those printed by others that are printed without 
any attempt to purchase postage. 

In order to validate a mailpiece, that is to assure 
that accounting for the postage amount printed on a 
mailpiece has been properly done, it is known that one 
may include as a part of the franking an encrypted 
number such that, for instance the value of the franking 
may be determined from the encryption to learn 
whether the value as printed on the mailpiece is correct. 
See for example, U.S. Patent Nos. 4,757,537 and 
4,775,246 to Edelmann et al. as well as U.S. Patent No. 
4,649,266 to Eckert It is also known to authenticate a 
mailpiece by including the address as a further part of 
the encryption as described in U.S. Patent No. 
4,725,718 to Sansone et al and U.S. Patent No. 
4,743.747 to Fougere et al. 

U.S. Patent No. 5,170,044 to Pastor describes a 
system wherein include a binary array and the actual 
arrays of pixels are scanned in order to identify the pro- 
vider of the mailpiece and to recover other encrypted 
plaintext information. U.S. Patent No. 5,142.577 to Pas- 
tor describes various alternatives to the DES encoding 
for encrypting a message and for comparing the 
decrypted postal information to the plaintext information 
on the mailpiece. 

U.K. 2,251 .210A to Gilham describes a meter that 



contains an electronic calendar to inhibit operation of 
the franking machine on a periodic basis to ensure that 
the user conveys accounting information to the postal 
authorities. U.S. Patent No. 5,008,827 to Sansone et al, 

5 describes a system for updating rates and regulation 
parameters at each meter via a communication network 
between the meter and a data center. While the meter is 
on-line status registers in the meter are checked and an 
alarm condition raised if an anomaly is detected. 

io U.S. Patent No. 5,390,251 to Pastor et al. describes 
a mail processing system for controlling the validity of 
printing of indicia on mai (pieces from a potentially large 
number of users of postage meters includes apparatus 
disposed in each postage meter for generating a code 

is end for printing the code on each mailpiece. The code is 
an encrypted representation of the postage meter appa- 
ratus printing the indicia and other information uniquely 
determinative of the legitimacy of postage on the mail- 
pieces. The keys for the code generating apparatus are 

so changed at predetermined time intervals in each of the 
meters. A security center includes apparatus for main- 
taining a security code database and for keeping track 
of the keys for generating security codes in correspond- 
ence with the changes in each generating apparatus 

25 and the information printed on the mailpiece by the 
postage meter apparatus for comparison with the code 
printed on the mailpiece. There may be two codes 
printed, one used by the Postal Service for its security 
checks and one by the manufacturer. The encryption 

30 key may be changed at predetermined intervals or on a 
daily basis or for printing each mailpiece. 

ft will be appreciated that in order to verify the infor- 
mation in the PRB using the encrypted message, the 
verifier must first be able to obtain the key used by the 

35 particular meter. In trying to deal with mailing systems 
which may incorporate such encryption systems, it must 
be recognized that the meter population is large and 
subject to constant fluctuation as meters are added and 
removed from service. If the same key were to be used 

40 for all meters, the key distribution is simple but the sys- 
tem is not secure. Once the code is broken by anyone, 
the key may be made available to others using the sys- 
tem and the entire operation is compromised. However, 
if separate keys are used respectively for each meter 

45 then key management potentially becomes extremely 
difficult considering the fluctuations in such a large pop- 
ulation. 

European Patent Publication No. 0647924, filed 
October 7, 1994, and assigned to the assignee of the 

so instant application, describes a key management sys- 
tem tor mail processing that assigns one of a set of pre- 
determined keys by a determined relationship to a 
particular meter, effectively allowing multiple meters to 
share a single key. The key management system 

55 includes the generation of a first set of keys which are 
then used for a plurality of respective postage meters A 
first key of the first set of key is then related to a specific 
meter in accordance with a map or algorithm. The first 
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key may be changed by entering a second key via an 
encryption using the first key. 

It has been found that although the system 
described in European Patent Publication No. 0647924 
previously noted and hereafter referred to a the "1000 5 
key system" provides a manageable key management 
system, the system has multiple meters sharing the 
same key. 

It is therefore an object of the invention to provide a 
key management system which provides the improved 
security 1000 key system and yet which will allow ease 
of key management in a very large system. 

It is another object to provide a method for easily 
changing the keys for each meter in a manner that pro- 
vides improved security and system wide tracking of the 
key changes. 

In accordance with the present invention, a key 
control system comprises the generation of a first set of 
predetermined keys which are then used as mas- 
ter keys for a plurality of respective postage meters. The 
keys are then related to a respective meter in accord- 
ance with a map or algorithm. The predetermined mas- 
ter key Kp red is encrypted with the date to yield a date 
dependent key related to the respective meter. The 
date dependent key is encrypted with a unique identifier 
of the respective meter to yield a unique key K, jnal that is 
used by the respective meter to generate digital tokens. 
The Data Center encrypts the date with each predeter- 
mined key to yield a table of dependent keys 
Kdd's. The table of K^'s are distributed to verification 
sites. The verification site reads a meter's identification 
from a mailpiece being verified to look up the dependent 
key of the meter from the distributed table. The ver- 
ification site encrypts the dependent key with the 
unique identifier to obtain the unique meter key which is 
used to verify tokens generated by the meter. 

In a preferred embodiment the method in accord- 
ance with the invention further comprises the steps of 
storing the master key Kp^, the date dependent key 
Kftj, and the unique key K fjna | , in the meter. 

In an alternate embodiment the master key Kp red is 
encrypted with a unique meter identifier to obtain the 
unique key K fjna | which is stored in the meter. The meter 
then generates its date dependent key K^, which is 
used to generate digital tokens. 

The above and other objects and advantages of the 
present invention will be apparent upon consideration of 
the following detailed description taken in conjunction 
with accompanying drawings, in which like reference 
characters refer to like parts throughout, and in which: 

Fig. 1 . is a schematic view of a system which may 
be used in accordance with an embodiment of the 
invention; 

Figs. 2a and 2b illustrates the information which 
may be printed in a first embodiment of a PRB in 
accordance with an embodiment of the invention; 
Figs. 3a and 3b illustrate an alternative to the infor- 



mation shown in Fig. 2a and 2b; 

Fig. 4 is a flow chart of the operation for providing 

keys in accordance with an embodiment of the 

invention; 

Fig. 5 is a flow chart of meter operation in accord- 
ance with the preferred embodiment of the present 
invention; 

Fig. 6 is a flow chart of meter operation in accord- 
ance with an alternate embodiment of the present 
invention; 

Fig. 7 is a flow chart of data center operation in 
accordance with the preferred embodiment of the 
present invention; 

Fig. 8 is a flow chart of the verification process; 
Fig. 9 is a block diagram of the preferred embodi- 
ment of the present invention; and 
Rg. 10 is a block diagram of an alternate embodi- 
ment of the present invention. 

In Fig. 1, there is shown generally at 10 an overall 
system in accordance with an embodiment of the inven- 
tion. In the embodiment illustrated, the system com- 
prises a meter or PED 12 interacting with a plurality of 
different centers. A first center is a welt -known meter- 
fund resetting center 14 of a type described, for exam- 
ple, in U.S. Patent No. 4,097,923 which is suitable for 
remotely adding funds to the meter to enable it to con- 
tinue the operation of dispensing value bearing indicia. 
In accordance with an embodiment of the invention 
there is also established a security or forensic center 16 
which may of course be physically located at the reset- 
ting center 14 but is shown here separately for ease of 
understanding. Alternatively, such a security or forensic 
center could be an entirely separate facility maintained 
by the Postal Authorities, for instance or two separate 
facilities may be maintained in order to provide levels of 
security, if desired. The dashed lines in Fig. 1 indicate 
telecommunication between the meter 12 and the reset- 
ting center 14 (and/or forensic center 16). 

Typically there may be an associated meter distri- 
bution center 18 which is utilized to simplify the logistics 
of placing meters with respective users. Similarly, a 
business processing center 20 is utilized for the pur- 
pose of processing orders for meters and for administra- 
tion of the various tasks relating to the meter population 
as a whole. 

The meter manufacturer indicated at 22 provides 
customized meters or PED's to the distribution center 
18 after establishing operability with shop checks 
between the manufacturer and the resetting center 14 
and forensic center 1 6. The meter or PED is unlocked at 
the user's facility by a customer service representative 
indicated here by the box 24. 

At the resetting center 1 4 a database 26 relating to 
meters and meter transactions is maintained. The reset- 
ting combinations are generated by a secured appara- 
tus labeled here as the Black Box 28. The details of 
such a resetting arrangement are found in U.S. Patent 
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No. 4,097,923, herewith specifically incorporated by ref- 
erence herein, and will not be further described here. 

Database 30 and a secured encryption generating 
apparatus, designated here as Orange Box 32, are 
maintained at the security or forensic center 16. The 
orange box preferably uses the DES standard encryp- 
tion techniques to provide a coded output based on the 
keys and other information in the message string pro- 
vided to it. It will be understood that other encryption 
arrangements are known and the invention is not limited 
to the specific embodiment using DES encryption. The 
security or forensic center 16, wherever maintained, is 
preferably connected by telecommunication with any 
Post Office inspection station, one of which is indicated 
here at 34. 

Further details are to be found in European Patent 
Publication No. 0647924, previously noted and specifi- 
cally incorporated by reference herein. 

Meter 12, as illustrated, includes a secure clock 40 
that is used to provide a calendar function programmed 
by the manufacturer. The clock and calendar function 
cannot be modified by the user. Such clocks are well 
known and may be implemented in computer routines or 
in dedicated chips which provide programmable calen- 
dar outputs. Also stored within the registers of the meter 
12 are a fund resetting key 42, security key 44, expira- 
tion dates 46 and preferably, an inscription enable flag 
48. Preferably, in order to prevent the breaking of the 
encrypted messages to be printed by the postage 
meter, the security key 44 is changed at predetermined 
intervals as discussed below. 

The security key 44 is used in conjunction with a 
DES encrypter in the meter 12 to provide an encryption 
of certain information in the PRB for each printing of the 
PRB on a mailpiece. At each printing operation, the 
entire encrypted message may be printed on the mail- 
piece. However, preferably the cipher, hereafter referred 
to herein as an ECODE (also referred to as a digital 
token) is a truncated ciphertext produced by DES 
encryption of the message based on postage informa- 
tion available to the meter. Verification at the security 
center consists of verifying that the encrypted informa- 
tion is consistent with the ECODE. 

If automatic checking of the ECODE is desired, 
both the ECODE and the plaintext must be machine 
readable. A typical length of plaintext information is, for 
example only and not by way of limitation, the sum of 
the meter ID (typically 7 digits), a date (preferably 2 dig- 
its, suitably the last 2 of the number of days from a pre- 
determined starting date such as January 1), the 
postage amount (4 digits), and the piece count for a typ- 
ical total of 1 6 digits. Reading devices for lifting the infor- 
mation either from a bar-code on the mailpiece or as 
OCR are well-known and will not be further discussed. 

A DES block is conventionally 64-brts long, or 
approximately 20 decimal digits. A cipher block is an 
encryption of 64 bits of data, tt will be appreciated that 
other information may be selected and that less than the 



information provided here may be encrypted in other 
embodiments of the invention. It is however important to 
note that the information to be encrypted must be iden- 
tical to that used in verification. To this end the plaintext 

5 message may include data which indicates the particu- 
lar information which is encrypted. This may take the 
form of an additional character, additional bar coding or 
a marking on the mailpiece as may be found desirable. 
If desired, a second ECODE could be printed using 

io a DES key from a set of keys PS-DES known to the 
Postal Service. Alternatively the Postal Service could 
elect to manage its own set of keys as described in con- 
nection with the key management system described 
below. 

15 In a first embodiment, as shown in Figs. 2a and 2b, 
the plaintext is encrypted using one of the keys from 
PS-DES. The Postal Service uses the same key from 
the set PS-DES to verify the message. A higher level of 
security is provided by the second ECODE. 

20 In a second embodiment two ECODEs are gener- 
ated and printed on the mailpiece, one using a PS-DES 
key provided by the Post Service and the other using a 
Vendor-DES key provided, for example, by the manufac- 
turer or security center. The Postal Service can then 

25 verify the message using its own code generating and 
key management system while the vendor can sepa- 
rately verify the validity of the message using the 
ECODE generated using its separate key system. Figs. 
3a and 3b show the format of this second embodiment. 

30 Fig. 4 shows an arrangement for managing meter 
master keys as disclosed in European Patent Publica- 
tion No. 0647924, previously noted. First a large, fixed 
set of predetermined keys Kpred's <s generated, at step 
400. As seen below, the system S in accordance with 

35 the invention comprises a set of pointers {p}, a set of 
keys indexed by the pointer {keyp} and a map F or gen- 
erating algorithm from the set of meter ID'S {M} to the 
set of pointers. Thus: 

S = ( F, {p}, keyp} ) is the system 

40 F: {M} --> {p} 

and 

F(M) = F(meter ID) = p 
finds the pointer to the key for a given meter M. 

Thus, returning to Fig. 4, as an example, the set of 

45 pointers {p} which may be the integers from 1 to 1000, 
are created from meter parameters, at step 405. The 
function F may be then chosen as, again for example, 
the DES encryption of meter ID using a DES key K, 
preferably truncated to three digits, at step 410 and a 

so look-up table is generated, at step 41 5. rt will be under- 
stood that other functional relationships may be chosen. 
The look-up table comprises a set of meter ID's and 
their assigned pointers. For the greatest security, it will 
be appreciated that the relationship between a pointer p 

55 and the corresponding key should not be easily discov- 
erable nor should the relationship between the pointer 
and the meter ID. tt will also be understood that the 
function F should be maintained in secret. 
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Referring now to Figs. 5 and 9, the preferred invention, 
embodiment of the present invention is shown. At step 
420, using the meter ID of a specific meter in the look- Claims 
up table, the corresponding Kp r6d is stored in the meter. 
At step 430. a date dependent key is generated 5 1. 
from the predetermined key Kp red by encrypting the 
date with Kp red to yield the for the meter. At step 
435, a unique meter identifier, such as a meter serial 
number, is encrypted with the date dependent key 
to produce a unique key Kf ina( for the meter. The meter 70 
generates digital tokens using its unique key K firmJ . 

Referring now to FIGs. 6 and 10, an alternate 
embodiment of the meter operation is shown. At step 
470, a unique meter identifier, such as a meter serial 
number, is encrypted with the predetermined master is 
key Kp fGd to yield a unique key K f j na | for the meter. The 
unique meter key K fina | is stored in the meter at step 
475. K f inaJ is used to generate a date dependent key 
in the meter by encrypting the date with K f ina( to produce 
date dependent key K^. 20 

Referring now to Fig. 7, the data center operation 
for the preferred embodiment is shown. At step 450, the 
date is encrypted with each predetermined master key 
Kpred to y' elc * a table of date dependent keys K^'s. At 
step 455, the data center distributes the table of K^'s to 25 
each of the verification sites for use in verifying digital 
tokens generated by the meters. 2. 

Referring now to Fig. 8, a verification process is 
shown using the key management system in accord- 
ance with an embodiment of the present invention. In 30 
order to verify a mailpiece, the meter ID number printed 
on the mailpiece is read at step 500. At step 510. using 
the meter ID number a date dependent key is found 
in the table of K^'s distributed by the data center. The 3. 
key is found using the lookup table or algorithm F from 35 
the given meter number. At step 515, the identical 
unique meter data that was used by the meter to obtain 
the meter's unique key K final is encrypted with the date 
dependent key K^. At step 520, the identical plaintext 
information used to create the ECODE is now encrypted 40 
at the security center using Kfj naJl and the result is com- 
pared with the code printed on the mailpiece, at step 
530. If there is a match at decision at step 540, the mail- 4. 
piece is valid, tf not the NO branch will trigger an alarm. 

Returning for the moment to Fig. 2a and Fig. 3a, the 45 
Postal Service is able in these embodiments to obtain 
the PS-DES pointer directly from the indicia without 
using the process shown in Fig. 8. In the cases illus- 
trated in Figs. 2b and 3b, the DES pointer is obtained by 
using a predetermined algorithm applied to the informa- so 
tion printed in the PED ID as described in connection 
with Fig. 8. 

While the present invention has been disclosed and 
described with reference to the embodiments disclosed 
herein, rt will be apparent that variations and modifica- ss 
tions may be made therein. It is thus, intended in the fol- 
lowing claims to cover each variation and modification 
that falls within the true spirit and scope of the present 



A method for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, the method 
comprising the steps of: 

generating a plurality of keys K to obtain a fixed 
key set Kp red(1 . n) ; 

assigning one of said plurality of keys Kp red to a 
particular postage meter M (12) by means of a 
determined relationship associated with the 
postage meter (12), said relationship being 
derived as a predetermined function F(M) cor- 
responding to the particular postage meter; 
encrypting said assigned key Kp rQd with a date 
to obtain an assigned date dependent key K^; 
and 

combining the assigned date dependent key 
K^j with information unique to the particular 
postage meter M unj to produce a final key K final 
for the particular postage meter M (l such that 

Kfinal= f (Kdd. M unj ). 

The method of claim 1 wherein said determined 
relationship associated with the postage meter is a 
pointer p associated with the particular postage 
meter M, said pointer p being derived as a function 
F(M) corresponding to predetermined parameters 
of the particular postage meter M. 

Tne method of claim 1 or 2 further comprising the 
steps of: 

encrypting a date with each in said fixed 
key set Kp red(1 . n) to yield a table of date 
dependent keys Kdd(i_ n ); arid 
distributing said table of date dependent keys 
Kdd(i-n) *° verification sites. 

A method for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, the method 
comprising the steps of: 

generating a plurality of keys K to obtain a fixed 
key set Kp re d(i-n); 

assigning one of said plurality of keys Kp red to a 
particular postage meter M by means of a 
determined relationship associated with the 
postage meter, said relationship being derived 
as a predetermined function F(M) correspond- 
ing to the particular postage meter; 
combining the assigned key Kp rQd with informa- 
tion unique to the particular postage meter M unj 
to produce a final key K fjnaJ for the particular 
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postage meter M, such that K^-f^. M unj ); 
and 

storing said final key K fjna | in the particular 
postage meter M. 

5. The method of claim 4 further comprising the steps 
of: 

encrypting said final key with a date to 
obtain a date dependent key for the partic- 
ular meter M; and 

storing said date dependent key in the par- 
ticular meter M. 



6. 



7. 



8. 



The method of claim 4 or 5 wherein said deter- 
mined relationship associated with the postage 
meter is a pointer p associated with the particular 
postage meter M, said pointer p being derived as a 
function F(M) corresponding to predetermined 
parameters of the particular postage meter M. 



A method for key management for controlling the 
keys used in the verification of encoded information 
to be printed on a mailpiece, the method compris- 
ing the steps of: 

generating a plurality of keys K to obtain a fixed 
key s e* Kpredfi-n): 

encrypting a date with each Kp rod in said fixed 

key set Kp red(1 . n) to yield a table of date 

dependent keys K^.^; 

distributing said table of date dependent keys 

Kdd(i-n) to verification sites; 

reading plaintext information printed on a mail- 



30 



A method for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, the method 
comprising the steps of: 25 



generating a plurality of keys K to obtain a fixed 
key set K pred ( 1 . n ); 

assigning one of said plurality of keys to a 
particular postage meter M by means of a 
determined relationship associated with the 
postage meter, said relationship being derived 
as a predetermined function F(M) correspond- 
ing to the particular postage meter; 
installing the assigned key Kp red in the particu- 
lar postage meter M; 

encrypting said assigned key Kp red with a date 
to obtain an assigned date dependent key K^; 
and 

combining the date dependent key with 
information unique to the particular postage 
meter M uni to produce a final key Kf inal for the 
particular postage meter M, such that K fi _ 

nai=f(Kdd. M uni)- 



piece, said plaintext information including a 
meter ID identifying a particular postage meter 
M; 

finding a date dependent key Kcw correspond- 
5 ing to the particular postage meter M by means 

of a determined relationship associated with 
the postage meter, said relationship being 
derived as a predetermined function of said 
meter ID; 

10 encrypting said meter ID with said date 

dependent key to obtain a final key K final ; 
encrypting at least some part ol the plaintext 
information using said final key K fina | to obtain a 
code; 

is comparing said code with encoded information 

printed on the mailpiece; and 
validating the mailpiece when said code 
matches said encoded information. 

20 9. A system for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, comprising: 



35 



40 



45 



means for generating a plurality of keys K to 
obtain a fixed key set K prod(1 . n) ; 
means tor assigning one of said plurality of 
keys Kpred to a particular postage meter M (12) 
by means of a determined relationship associ- 
ated with the postage meter (12), said relation- 
ship being derived as a predetermined function 
F(M) corresponding to the particular postage 
meter; 

means for encrypting said assigned key Kp rGd 
with a date to obtain an assigned date depend- 
ent key Kda; and 

means for combining the assigned date 
dependent key with information unique to 
the particular postage meter M unj to produce a 
final key K^, for the particular postage meter 
M f such that K^f^, M uni ). 

10. A system for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, comprising: 



means for generating a plurality of keys K to 
obtain a fixed key set Kp^^; 
means for assigning one of said plurality of 
keys to a particular postage meter M by 

so means of a determined relationship associated 

with the postage meter, said relationship being 
derived as a predetermined function F(M) cor- 
responding to the particular postage meter; 
means for combining the assigned key Kp red 

55 with information unique to the particular post- 

age meter M uni to produce a final key K^, for 
the particular postage meter M, such that K^ 
pffKdd, MunJ; and 
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means for storing said final key K fina | in the par- 
ticular postage meter M. 
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